CVE-2025-10826: Campcodes Online Beauty Parlor Management System sales-reports-detail.php sql injection

Published Sep 23, 2025

Updated

A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

Campcodes Online Beauty Parlor Management System

Campcodes Online Beauty Parlor Management System=1.0

Event History

Sep 23, 2025

CVE Published

via MITRE·12:32 AM

Data Sourced

via MITRE·12:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10826?

CVE-2025-10826 is rated as a critical vulnerability due to its potential for SQL injection.

How do I fix CVE-2025-10826?

To fix CVE-2025-10826, validate and sanitize the 'fromdate' and 'todate' parameters in the /admin/sales-reports-detail.php file.

What systems are affected by CVE-2025-10826?

CVE-2025-10826 affects Campcodes Online Beauty Parlor Management System version 1.0.

What type of vulnerability is CVE-2025-10826?

CVE-2025-10826 is an SQL injection vulnerability.

Can CVE-2025-10826 be exploited remotely?

Yes, CVE-2025-10826 can be exploited remotely if an attacker manipulates the parameters sent to the affected endpoint.